AScan Heat Map

Company: CXL Finance

Business Unit: Audit
Location: London
Low results Med results

High results

Low risk

16

Med risk

High risk

The overall score is now 133

The table below shows each of the tests.
Each test has been assigned an Implication Score (Imp Score) and a Results Score (Res Score).
The implication score determines how serious a problem is when it occurs and cannot be changed. The
results score shows how much this problem exists on your system, ranging from green, through amber
to red.
Test code

Imp Res
Score Score

1 System settings
1.1 Security level

1.2 Auto configuration

1.3 Auto virtual

1.4 Default public authority

1.5 Allow user domain

1.6 Allow object restore

1.7 Attention program

2.1 Password level

2.2 Password expiration interval

2.3 Password limit adjacent digits

2.4 Password limit characters

2 System passwords

2.5 Password limit repetition

2.6 Password minimum length

2.7 Password maximum length

2.8 Password position different

2.9 Password does not require digits

2.10 Password required to be different

2.11 Password validation program

3.1 User Classes

3.2 Users with disabled profiles

3.3 Users current library

3.4 Users initial programs

3.5 Users initial menu

3.6 Users display sign-on information

3.7 Users limit capability

3.8 Users with limited device sessions

3.9 Users with special environments

4.1 Users with all objects authority

4.2 Users with security administration authority

4.3 Users with job control authority

4.4 Users with spool control Authority

4.5 Users with save system authority

4.6 Users with service authority

4.7 Users with audit authority

4.8 Users with system configuration authority

5.1 Users password expiry interval

5.2 Users with password set to expired

5.3 Users password last changed

5.4 IBM system profiles where password <> *NONE

3 Users

4 Special Authorities

5 User passwords

6 Signon attempts allowed

6.1 Maximum sign-on attempts

6.2 Maximum sign-On attempt action

6.3 Remote sign-on

6.4 Limit security officer

6.5 Display sign-on information

6.6 Limit device sessions

6.7 Inactive Interval

6.8 Inactive Message Queue

8.1 Audit control

8.2 Audit level

8.3 Audit end action

8.4 Audit frequency level

8.5 Create object audit

7 Groups
7.1 Users in each group
8 Auditing